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Abstract 

Works presented in this paper deal with the robustness of 
manufacturing job-shops with time constraints. A computing 
algorithm of a lower bound of the maximal time disturbances 
allowed in a given point is provided. To demonstrate the 
effectiveness and accuracy of this algorithm, two industrial 
examples are depicted. The possession of this bound allows 
checking the death of marks without the generation of too 
many false alarms. From a practical point of view, the death 
of a mark corresponds to an incorrect treatment of a given 
product. In food or pharmaceutics industries, this scenario is 
not acceptable because it jeopardizes health of humans. When 
a disturbance is lower than the bound value, the production 
remains correct and no quality alarm is generated. 
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Introduction 

This paper deals with control over manufacturing 
workshops with time constraints. The considered 
systems have a robustness property which allows 
maintaining products quality when there are time 
disturbances (Jerbi et al, 2009). The robustness is 
defined as the capability of the system to preserve the 
specifications when confront some expected or 
unexpected variations. Thus, the robustness 
characterizes the capacity to deal with disturbances. 
The robustness is interpreted into different 
specializations. The passive robustness is based upon 
variations included in validity time intervals. There is 
no control loop modification to preserve the required 
specifications. On the other hand, active robustness 
uses observed time disturbances to modify the control 
loop in order to satisfy these specifications. During the 



past decade, several approaches have dealt with 
manufacturing workshops with time constraints 
(Jerbi et al, 2004), (Atto et al, 2008). For example, in 
Jerbi (2004), a computation of the local passive 
robustness of a given path is built up. Moreover, an 
algorithm computing a lower bound of the maximal 
time disturbances allowed on a given point was 
provided. Since, the result of the algorithm is a lower 
bound. 

The work presented in this paper focuses on the 
robustness of workshops with/without assembling 
tasks, regarding time disturbances. More precisely, we 
aim at computing the value of passive robustness 
bounds for some systems characterized with 
synchronization and delay phenomena. Among the 
broad variety of applications concerned, one can cite 
transportation systems and production systems. The 
contribution of this paper is the application of a 
computing algorithm with a lower bound of the 
maximal time disturbances to workshops with/without 
assembling tasks. 

The remainder of this paper is organized as follows. 
Section 1 begins with the definition of a P-time Petri net 
model and its functional decomposition. Section 2 
gives some basic definitions concerning robustness of 
Discrete Event Systems (DES). Then, the local 
robustness of a given path in the workshop is 
analytically built up. Moreover, an algorithm 
computing a lower bound of the maximal time 
disturbances allowed on a given point is provided. 
Finally, in order to show the effectiveness of this 
algorithm, an application of the proposed algorithm to 
two manufacturing workshops is outlined and results 
are discussed. 
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Modelling tools of DES Integrating Time 
Constraints 

P-time Petri Net 

Definition 1 (Khansa et al, 1996): The formal definition 
of a P-time Petri net is given by a pair < R; I > where: 

R is a marked Petri net, 
IS: P ->Q + x (Q + u {+oo}) 

pi — » ISi = [ai, bi] with < ai < bi. 

ISi defines the static interval of holding time of a mark 
in the place pi belonging to the set of places P (Q + is the 
set of positive rational numbers). A mark in the place pi 
is taken into account in transition validation when it 
has stayed in pi at least a duration ai and no longer than 
bi. After the duration bi the token will be dead. 

Notations 

• p°i (respectively °pi): the output transitions of the 
place pi (the input transitions of the place pi), 

• qie: the expected sojourn time of the token in the place 
Pv 

• qi : the effective sojourn time of the token in the place 

pi, 

• Ste(n): the nnd expected firing instant of the transition 
t, 

• St(n): the nnd effective firing instant of the transition t, 

• Tc: the set of controllable transitions, 

• Ts: the set of synchronization transitions. 

Functional Decomposition 

As the sojourn times in places have not the same 
functional signification when they are included in the 
sequential process of a product or when they are 
associated to a free resource, a decomposition of the 
Petri net model into four sets is made using (Long, 
1993), where: 

• Ru is the set of places representing the used 
machines, 

• Rn corresponds to the set of places representing 
the free machines 

• Transc is the set of places representing the 
loaded transport resources, 

• TransNc is the set of places representing the 
unloaded transport resources (or the 
interconnected buffers), 

• Transc is the set of places representing the 
loaded transport resources. 

Passive Robustness 

Basic Definition 

Definition 2 (Jerbi et al 2004): Let us consider a discrete 
event system and G the associated Petri net model. Let 



us call B(G) the behaviour of G corresponding to the 
trajectory that states successively reached. Let C(B(G)) 
be the schedule of conditions established on the system 
behaviour B(G). C(B(G)) is materialized by a series of 
constraints which must be checked by B(G). A non 
respect of B(G) corresponds to a violation of C(B(G)). It 
is said that a subset SG of G is robust to a disturbance 5 
if and only if VneSG, and that the occurrence of the 
disturbance 8 at the node n does not involve a violation 
of C(B(G)). 

Definition 3 (Collart Dutilleul, 2007): The passive 
robustness corresponds if no change in control is 
necessary so that the properties specified by the 
schedule of conditions are preserved in the presence of 
disturbance. 

Definition 4 (Collart Dutilleul, 2007): A mono- 
synchronized subpath Lp is a path containing one and 
only one synchronization which is its last node. 

Definition 5: An elementary mono-synchronized 
subpath is a mono-synchronized subpath beginning 
with a place p such as °p is a synchronization transition. 

Definition 6: It is said that a path Lp has a local passive 
robustness On [8min, 8max I if the occurrence of a 
disturbance 8e[8min, 8max] at any place peLp does not 
involve a token death at synchronization transitions of 
Lp. 

Figure 1, shows an elementary mono-synchronized 
subpath Lp= (pm, tm, pm, tn) with different notations. 

Definition 7 (Jerbi et al, 2009): The time passive 
rejection capacity interval of a path Lp is RC(Lp) = 
[Ca(Lp), Cr(Lp)] where: 

Ca(Lp) = JX" b i)' 0) 
p { eLpn(R N uTrans NC ) 

Cr(Lp) = JX-a,)- ( 2 ) 
p { eLpn(R N uTrans NC ) 

! ho2=°IN(Lp) is a M P 112=I N(Lp) represents j j hi2=IN°(Lp) is j 
! synchronization I j a running machine j j a parallelism j 
I transition (tio 2 e M (pm^Ru) j j transition (tm Tp) j 




Fig. 1 An elementary mono-synchronized subpath with 



DIFFERENT NOTATIONS 
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Passive Robustness Computation 

To compute local passive robustness interval, the 
concept of compensable and transmissible margin is 
introduced. 

The compensable margin and the transmissible margin 
on the mono-synchronized subpath Lpk are denoted as 
Arck and Artk respectively. 

The local passive robustness delay ArL P k can be 
calculated using formulas (3), (4) and (5) (Collart 
Dutilleul et al, 2007). 



With: 



Ar L Pk =Arc k +Art k 



ArC k= S (q ie" a i) 

Pi GL Pk n ( R N UTmnS Nc) 

Art k = min(b 1 - q ie ) 
Pl °=OUT(L Pk ) 

P^LPk 



(3) 
(4) 
(5) 



1) Computation Algorithm of the Lower Value of 
Passive Robustness for a Delay 

In order to avoid the violation of schedule 
conditions, a recursive algorithm allowing 
computing a lower bound of the maximal time 
disturbances allowed in a given point of 
manufacturing workshops is presented. 

a) Algorithm (Jerbi et al, 2004) 

cp = {Lpj/ (n°=IN(Lpj))A(LpjeCms)A(LpjeG)} 

Marge <^= minfArq + F(G\Lpj, OUT(Lpj)°, min 
(bi-qie))] 

j po i= 

OUT(LpO 

p°i^L Pj 

F(G*, p*, Art) 
{ 

cp* = {L Pj / (p^Lp ] )A(Lp ] eCse)A(Lp j eG^)) 
If (cp* == O ou Art == 0) alors (F Art) 
Else 
{ 

F^min{min[Art,(Arq+F(G* \ Lp ] ,OUT(Lp ] )°,min(bi-q i 

e)))} 

OUT(LpO 

p°i£Lpj 

} 

} 

2) Description of the Algorithm 

The algorithm behaves in such a way: 



Select the node where we want to calculate the 
passive robustness margin, 

- Build the set of mono-synchronized subpaths (cp) 
defined as follows: 

cp = {Lpj/ (n°=IN (Lpj))A(Lpj6Cms)A(LpjeG)} 

- Calculate the passive robustness margin associated 
to the set of subpaths cp, 

- Remove the elementary mono-synchronized 
subpath for the construction of the whole cp* defined 
as follows: 

cp* = {L Pj / (p*GLp ] )A(Lp ] eCse)A(Lp j gG*)} 

- Compute for each mono-synchronized subpath of 
cp*, the passive robustness margin F defined as 
follows: 

F<^min{min[Art,(Arq+F(G* \ Lpj, 
OUT(L P] )°,min(bi-qie))]} 

j p o i= 

OUT(LpO 

p°i£L Pj 

- Stop the algorithm if the following condition is 
satisfied: 

(cp* == O ou Art == 0) alors (F <= Art) 
Illustrative Examples 

Milk Production Unit (Job Shop with Assembling 
Tasks) 

1) Presentation of the Workshop 

Figure 2, shows a milk manufacturing unit in 
repetitive functioning mode, composed by six 
machines (Mi, M2, M3, M4, Ms, M6) and seven 
conveyors (Ti, T2,T3, T4, Ts, T6,Tz), where: 

- Mi is a bottle filling machine, 

- M2 is a milk bottle capper, 

- M3 is a time/date stamp, 

- M4 is an hydromat, 

- Ms is a labelling machine, 

- M6 is a packaging machine. 

To manufacture product (bottle of 1000 ml), empty 
bottles (group of 6) are placed on the conveyor Ti to 
supply the bottle filling machine Mi. Once this 
operation is completed, the filled bottles are 
transported towards the capping machine M2 by the 
conveyor T2. After capping, the bottles arrive 
directory on T3, then this conveyor carries the 
bottles to the machine M3 (time/date stamp) to print 
the manufacturing date and end date of 
consumption. 
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The bottles leave the machine M3 on a conveyer T4 
towards the machine M4 (Hydromat). The hydromat 
ensures the sterilization of milk which is heated to 
sterilization temperature 140°-150°C. After 
sterilization, cooling takes place using a cold water 
tank and atmospheric air. As a result, the milk does 
not require refrigeration and has a relatively longer 
shelf life (3 to 6 months at ambient temperature) 
with an excellent safeguarding of the vitamins and 
original qualities. Once this task is completed, the 
bottles are transferred to the labelling machine Ms 
via the conveyor Ts. Next; the bottles arrive to the 
packaging machine M6, where they will be wrapped 
by welding in a group of 6. Lastly, the finished 
product is deposited on the conveyor Tz towards 
the stock of finished products SA. 

2) Modeling of Milk Production Unit 

P-time Petri nets are convenient tools to model 
manufacturing systems whose activities times are 
included between a minimum and a maximum 
value. Figure 3 shows a P-time Petri net (G) 
modeling a milk production workshop and its 
functional decomposition. The obtained G is used to 
study the robustness of the considered 
manufacturing workshop (Long, 1993). 

3) Computation of the Lower Value of Passive 
Robustness in Milk Manufacturing Workshop 

In Table I, we can quote the following examples of 
the compensable margin and the transmissible 
margin associated to some mono-synchronized 



subpaths Lpk of the P-time Petri net model (Figure 
3). 

Let us take the P-time Petri net as example, Figure 3 
associated to milk manufacturing unit. 

The application of the algorithm at the node t9, in 
Figure 4, allows computing a lower value of passive 
robustness margin equal to 10 (Margin= 10). 

In fact, according to the recursive algorithm, the set 
of mono-synchronized subpaths (cp) is defined as 
follows (Figure 4): 

q> ={Lpj / (n°=IN(Lpj))A(LpjeCms) a (LpjeG)} 

cp ={Lpo=(p9, t9, pis, ts); Lpi=(p9, t9, pioi, tioi); Lp2=(p9, t9, 
pi02, tl02); Lp3=(p9, t9, pio3, tio3); Lp4=(p9, t9, pi04, tl04); 

Lp5=(p9, t9, pi05, tl05); Lp6=(p9, t9, pi06, tl06)}. 

TABLE I Compensable margin and transmissible margin 
associated to some mono-synchronized subpaths of G 



Path 


Art k 


Arc k 


Lp0=(p9, t9, pi8, fa) 


6 


689 


Lpi=(p9, t9, piOl, tlOl) 


+00 





Lp2=(p9, t9, pi02, tl02) 


+00 





Lp3=(p9, t9, pi03, tl03) 


+00 





Lp4=(p9, t9, pi04, tl04) 


+00 





Lp5=(p9, t9, pi05, tl05) 


+00 





Lp6=(p9, t9, pi06, tl06) 


+00 





Lp7=(pill, till, pi91, tl02) 


56 


5 


Lp8=(pil2, tll2, pi92, tl03) 


41 


3 


Lp9=(pil3, tll3, pi93, tl04) 


28 


3 


Lpi0=(pil4, tll4, pi94, tl05) 


19 


2 


Lpil=(pil5, tll5, pi95, tl06) 


12 


4 


Lpi2=(pil6, tll6, pi96, tlOl) 


71 


36 




M 2 










T 2 I 




/ 








Fig. 2 Milk manufacturing unit 
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ISm= [2, 20]; 
S 10 i=P,70]; qille =10 
qioie=5 t Dm t IS i2i-[5,130],q 121e -65 



TABLE II Passive margin associated to mono-synchronized 
subpaths 




Fig. 4 Example of disturbance propagation: case of passive 
robustness 

The full set of margins associated to each mono- 
synchronized subpath is summarized in table II. 
The lower bound of passive robustness margin is 
equal to 10 (F<= min [Margin 1, Margin 2, Margin 3, 
Margin 4, Margin 5, Margin 6]). 

Let us illustrate the local margin associated to the 
path Lpi.This margin equals 23 time units; 

- On the path Lpi, the disturbance change 
passively the firing instant of the transition t9 and 
also the sojourn time in the place p9: St9(n)=St9e(n) 
+23 and q9=q 9e +23=1553. 



Margin 


Expression 


Value 


Marginl 


Margin 1 min [Arci+ F(G\Lpi, OUT(Lpi)°, 
min (bi96-qi96e))] 
p°i96= OUT(Lpi) 

Margin 1 min [0+ F(G\Lpi, pin , +<*>)] 


Marginl£23 


Margin2 


Margin 2 min [Arc 2 + F(G\Lp 2/ OUT(Lp 2 )°, 
min (bi9i-qi9ie))] 
p°i9i= OUT(Lp 2 ) 

Margin 2 <^= min [0+ F(G\Lp2, pii2 , +oo)] 


Margin2£l8 


Margin3 


Margin 3 <= min [Arcs+ F(G\Lp3 / OUT(Lp 3 )° / 
min (bi92-qi92e))] 
p°i92= OUT(Lp 3 ) 

Margin 3 <^= min [0+F(G\Lp3, pii3, +°° )] 


Margin3£l5 


Vlargin4 


Margin 4 <= min [Arc4+F(G\Lp 4/ OUT(Lp 4 ) / 
min (bi93-qi93e))] 
p°i93= OUT(Lp 4 ) 

Margin 4 <= min [0+ F(G\Lp4, pii4 , +°° )] 


Margin4£l2 


Margin5 


Margin 5 min [Arcs +F(G\Lp 5/ OUT(Lp 5 ) / 
min (bi94-qi94e))] 
p°i94= OUT(Lps) 

Margin 5 min [0+ F(G\Lps, pus , +°° )] 


Margin5£l0 


Margin6 


Margin 6 min [Arc6+F(G\Lp6 / OUT(Lp 6 )° / 
min (bi95-qi95e))] 
p°i95= OUT(Lp 6 ) 

Margin 6 min [0+ F(G\Lp6, pii6 , +°° )] 


Margin6<=106 



- After the crossing of the transition tioi, the 
disturbance is transmitted to the two paths 
Lp7=(pm, tin, pi9i, tio2) and Lpi3=(pin, tin, pi2i, ti2) 
through the starting place pin. 

- On the path Lpz, the disturbance is partially 
rejected in pi9i (Cr(Lpz) =5) and the mark is 
available in pi9i with a delay time equals to 18. This 
delay is accepted in pio2 since the available control 
margin for a delay accepted is equals to 50 (ISio2=[3, 
70], qio2e=20). The firing instant of the transition tioi 
is Stioi(n)=Stioie(n)+18 and the residue (8'=18) is 
transmitted to the two paths Lp8=(pm, tm, pi92, tio3) 
and Lpi4=(pii2, tm, pi22, ti2) through the place pii2. 

- On the path Lps, the residue of disturbance is 
partially rejected (Cr(Lps)=3), and this delay is 
acceptable on pio3 since the passive transmissible 
margin on the mono-synchronized subpath Lp3 is 
35 (ISio3=[3, 70], qio3e=35). 

The residue 8"= 15 is propagated towards the 
three paths Lp9=(pii3, tii3, pi93, tio4), Lpio=(pii4, tiu, 
pi94, tios) and Lpn=(pii5, tns, pi95, tio6). It is easily to 
check that this residue is partially rejected by these 
tree paths since Cr(Lp9)=3, Cr(Lpio)=2, and 
Cr(Lpn)=4. 

- The token is available in pi95 with a delay time 
equals to 6. There is no death of mark in pio6 since 
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we can accept a maximum delay time equal to 6 
(ISio6=[3, 70], qio6e=64). Therefore, the occurrence of 
the disturbance 8 at the node t9 does not involve a 
violation of C(B(G)). 

Multi-product Job-shops without Assembling Tasks 

Figure 5 shows a P-time Petri net (G) modeling a 
system composed of two sequential processes GOi and 
GO2 with two shared machines (Mi, M2). 

The full set compensable margin and the transmissible 
margin associated to some mono-synchronized 
subpaths Lp, in Figure 5, are summarized in Table III. 

The application of the algorithm at the node ts, in 
Figure 5, allows computing a passive robustness 
margin (lower bound) equal to 6 (Margin=6). It is 
easily to check that the occurrence of the disturbance 
at the node ts does not involve a violation of C(B(G)). 

The residue 8"= 15 is propagated towards the 
three paths Lp9=(pii3, tii3, pi93, tio4), Lpio=(pii4, 
tiu, pi94, tios) and Lpn=(pii5, tus, pi95, tio6). It is 
easily to check that this residue is partially 
rejected by these tree paths since Cr(Lp9)=3, 
Cr(Lpio)=2, and Cr(Lpn)=4. The token is 
available in pi95 with a delay time equal to 6. 
There is no death of mark in pio6 since we can 
accept a maximum delay time equal to 6 
(ISio6=[3, 70], qio6e=64). Therefore, the occurrence 
of the disturbance 8 at the node t9 does not 
involve a violation of C(B(G)). 

Margin <= F(G\Lp', p2, +00) 

(p* = {Lp3, Lp4} et (Li= Lp r uLp3 ; Li= Lp'u Lp4) 
Tminf+oo, F(G\Lp'\Lp3, p4, +00)] 
F <= min < 

^ninf+oo, 5+F(G\Lp , \Lp 4 , pis, 1)] 
Step 1: Computation of F(G\ Lp'\Lp3, p4, +00) 
cp* = {Lp6} 

F <= min[+oo, 5+F(G\ Lp'\Lp3\Lp6, pn, 3)] 

Step l.l:Computation of F(G\ Lp'\Lp3\Lp6, pn, 3) 

cp* = {Lpz, Lps} 
[min[3, 8+F(G\Lp , \Lp 3 \Lp 6 \Lp7, p 4/ 5)]= 3 
F <= mins 

min[3, F(G\ Lp'\Lp3\Lp6\Lps, pi3, +00)] 
Step 1.1.1: Computation of F(G\ Lp'\Lp3\Lp6\Lps, 

pi3, +00) 

cp* = {Lpi, Lp 2 } 
fnin[+oo,18+F(G \ Lp' \ Lp3 \ Lp6 \ Lps \ Lpi,pn,+oo)] 
F <= mirx 

[min[+oo,7+F(G\Lp , \Lp3\Lp6\Lp 8 \Lp2, p 2/ 9)] 



Stepl.1.1.1: Computation of 

F(G\Lp'\Lp3\Lp6\Lps\Lpi, pn, +00) 
cp* = O then F <^ +00 




/S 5 =[5,+ao] ;q 5e =10 
Q A place belonging to Transc Q A place belonging to Ru 

^) A place belonging to RN (QJ) A place belonging to TransNc 
Fig. 5 An Hillion like model 

Table III Passive margin associated to mono-synchronized 

SUBPATHS 



Path 


Arck 


Artk 


Lpi=(pi3, t9, pi4, tlO, pi5, til, pi6, tl2, piO, t6) 


8 


+00 


Lp2=(pi3, t9, p9, tl) 


7 


9 


Lp3=(p2, t2, p3, t3) 





+00 


Lp4=(p2, t2, p8, t8) 


5 


1 


Lp5=(p4, t4, p5, t5, pi, tl) 


9 


+00 


Lp6=(p4, t4, p6, t6) 


5 


3 


Lp7=(pil, t7, p7, t3) 


8 


5 


Lp8=(pil, t7, pi2, t8) 





+00 



Step 1.1.1.2: Computation of 
F(G \ Lp r \ Lp3 \ Lp6 \ Lps \ Lp2, p2, 9) 

<p* = O then F <= 9 

Step 2: Computation of F(G\ Lp'\Lp4, pi3, 1) 
cp* = {Lpi, Lp 2 } 

(min[l, 18+F(G\Lp , \Lp 4 \Lpi, pn, +oo)]=l 
F <= minJ 

I min[l, 7+F(G\ Lp , \Lp 4 \Lp 2 \Lp8, p 2/ +oo)]=l 

The lower bound of passive robustness is equal to 6 
(Margin <^ 6) 
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Conclusion 

The local robustness of a given path in the workshops 
is analytically built up. Moreover, an algorithm 
computing a lower value of the maximal time 
disturbances in manufacturing system with and 
without assembling tasks is provided. 

The use of this lower value improves the monitoring 
of the industrial processes with time constraints, 
increasing the productivity and reducing the 
maintenance costs by improving the availability of the 
production systems. 

Based on two workshops topology, it can be claimed 
that the computed bound allows checking the death of 
marks without the generation of many false alarms. 

The algorithm has to be studied from a computing 
complexity point of view in order to figure out if it is 
really scalable and compatible in the general case. 

The computing of the lower value of passive 
robustness in manufacturing workshops with 
assembling tasks should be paid attention due to its 
capability in the elimination of unobservable set of 
disturbances (Mhalla et al, 2010a), (Mhalla et al, 2010b). 
Since the passive robustness is based upon variations 
included in validity time intervals, there is no control 
loop modification to preserve the required 
specifications. Indeed, the computing of a lower 
bound of passive robustness interval allows solving 
the false alarm problem but not the avoidance of 
constraint violation. 
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